Analysis
-
max time kernel
120s -
max time network
134s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
11/04/2024, 16:20
Behavioral task
behavioral1
Sample
edd7fab54d5e7fe41517b2b2478ce1db_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
edd7fab54d5e7fe41517b2b2478ce1db_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
edd7fab54d5e7fe41517b2b2478ce1db_JaffaCakes118.pdf
-
Size
86KB
-
MD5
edd7fab54d5e7fe41517b2b2478ce1db
-
SHA1
c71319e0fba8946f4f2525a2417ce8b67c6b7a9e
-
SHA256
9df31022fa58974dd571930d658de0239dd90bc9cc02ed3c977d4631280cde38
-
SHA512
c22ee89844e00fea3d1c4931741c1b5797b8db978000f6ce552e8edd23eee262c02f674f87b43e159060b161ba84c94981009976e9b16b06e4a0129e06c0596f
-
SSDEEP
1536:/BiEp6EN9shFYhWPTH9KZYqHySD0tPLKKasfhWHpOvTWEnOQX78Osdl:Jivw2zYodKZXy20tLWsnvlnOQL8O4
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2288 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2288 AcroRd32.exe 2288 AcroRd32.exe 2288 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\edd7fab54d5e7fe41517b2b2478ce1db_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2288
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD51007f6446d95ba8f0dfe9ba4baa48d8d
SHA14a8f3f4fdabc905ee5ac4d00059c6c3b8640c040
SHA2569e9fd2bab6630b45b745ff32f8a634d7c24660434b62505a119621b1f7e06494
SHA512b3eb2b5fe36d60bf85ca4057ba4c11080758277b5289572e93fde0448c3366b4724c82de862de30773653c19df1a847e44fbd665c86ea32baadd7ccf131bf284